Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected?


  • Please log in to reply
3 replies to this topic

#1 English1

English1

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 19 December 2006 - 07:48 PM

About 3 weeks ago this PC started slowing down and displaying a strange I.E. 6.0 problem. Whenever another session of I.E. opens it is blank, the original is slug slow and there is a 7 to 8 second flash that happens with consistency. The user downloaded and installed I.E. 7 which has since been removed. Have run Spybot, AdAware, Stinger, chased symptoms thru Google and tried use Firefox instead of I.E. A full system scan with lastest McAfee has been done both in Windows and in safe mode (Spybot and AdAware too). Several scans ago McAfee found exploit byte trojan (affecting 2 .jar files) and was unable to move or delete. Scanned throughly all the places this was supposed to set itself up and could not find the bugger.

No luck yet, help PLEASE

Logfile of HijackThis v1.99.1
Scan saved at 5:20:47 PM, on 12/19/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Common Files\AOL\1124737587\ee\AOLHostManager.exe
C:\Program Files\Common Files\AOL\1124737587\ee\AOLServiceHost.exe
C:\WINDOWS\system32\svchost.exe
C:\Corel\Suite8\Programs\CCWin\Aim\aim.exe
C:\Program Files\Common Files\AOL\1124737587\ee\AOLServiceHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1124737587\ee\AOLHostManager.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Corel\Suite8\Programs\CCWin\Aim\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {26BFFB87-5B07-4611-82BB-AF3947013FDD} (DAPCtl Class) - http://www.lexis.com/dl/IEDAP.cab
O16 - DPF: {963BE66B-121D-4E6C-BF9F-1A774D9A2E41} - http://moneycentral.msn.com/cabs/pmupdate2.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

BC AdBot (Login to Remove)

 


#2 MFDnSC

MFDnSC

    Ret. Director I/T


  • Members
  • 4,310 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 22 December 2006 - 04:37 PM

If you mean Java Byte - then

Control Panel > Java > General tab
Temporary Internet Files > Delete Files
Checkmark all 3 options and click OK
=============================

Download AVG Anti-Spyware from http://www.ewido.net/en/download/ and save that file to your desktop. Note: This is NOT the Anti Virus from AVG.

When the trial period expires it becomes feature-limited freeware but is still worth keeping as a good on-demand scanner.
1. Once you have downloaded AVG Anti-Spyware, locate the icon on the desktop and double click it to launch the set up program.
2. Once the setup is complete you will need run AVG Anti-Spyware and update the definition files.
3. On the main screen select the icon "Update" then select the "Update now" link.
o Next select the "Start Update" button. The update will start and a progress bar will show the updates being installed.
4. Once the update has completed, select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
5. Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
6. Under "Reports"
o Select "Automatically generate report after every scan"
o Un-Select "Only if threats were found"
Close AVG Anti-Spyware. Do Not run a scan just yet, we will run it in safe mode.
1. Reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight Safe Mode then hit enter.

IMPORTANT: Do not open any other windows or programs while AVG Anti-Spyware is scanning as it may interfere with the scanning process:
2. Launch AVG Anti-Spyware by double clicking the icon on your desktop.
3. Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
4. AVG will now begin the scanning process. Please be patient as this may take a little time.
Once the scan is complete, do the following:
5. If you have any infections you will be prompted. Then select "Apply all actions."
6. Next select the "Reports" icon at the top.
7. Select the "Save report as" button in the lower lef- hand of the screen and save it to a text file on your system (make sure to remember where you saved that file. This is important).
8. Close AVG Anti-Spyware and reboot your system back into Normal Mode.
Post the log from AVG and a new HiJack log
"Nothing could be finer than to be in South Carolina ............"

Member ASAP

#3 English1

English1
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 26 December 2006 - 10:11 AM

Noted a particular thing when working with this PC; whenever an I.E. session is started 3 iexplorer.exe functions are started. Happens in SAFE mode or XP mode.

Tried to do a F- online scan and a Panda online scan, neither would work due to browser problems.

Attached find HiJack This and AVG logs.

Logfile of HijackThis v1.99.1
Scan saved at 5:42:39 PM, on 12/23/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\mcshield.exe
C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$MICROSOFTBCM\Binn\sqlservr.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\AOL\1124737587\ee\AOLHostManager.exe
C:\Program Files\Common Files\AOL\1124737587\ee\AOLServiceHost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\lexpps.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Program Files\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\tbmon.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1124737587\ee\AOLHostManager.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Corel\Suite8\Programs\CCWin\Aim\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {26BFFB87-5B07-4611-82BB-AF3947013FDD} (DAPCtl Class) - http://www.lexis.com/dl/IEDAP.cab
O16 - DPF: {963BE66B-121D-4E6C-BF9F-1A774D9A2E41} - http://moneycentral.msn.com/cabs/pmupdate2.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\acsd.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe


---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 5:17:05 PM 12/23/2006

+ Scan result:



C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll -> Adware.Viewpoint : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@msnportal.112.2o7[2].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Victor\Cookies\victor@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@adbrite[1].txt -> TrackingCookie.Adbrite : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@rotator.adjuggler[1].txt -> TrackingCookie.Adjuggler : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@ad.admarketplace[1].txt -> TrackingCookie.Admarketplace : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@admarketplace[1].txt -> TrackingCookie.Admarketplace : No action taken.
:mozilla.10:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@advertising[1].txt -> TrackingCookie.Advertising : No action taken.
:mozilla.9:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
C:\Documents and Settings\Victor\Cookies\victor@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.586:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Burstbeacon : No action taken.
C:\Documents and Settings\Ben\Cookies\ben@www.burstbeacon[2].txt -> TrackingCookie.Burstbeacon : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@www.burstbeacon[2].txt -> TrackingCookie.Burstbeacon : No action taken.
C:\Documents and Settings\Ben\Cookies\ben@burstnet[1].txt -> TrackingCookie.Burstnet : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@burstnet[1].txt -> TrackingCookie.Burstnet : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@www.burstnet[1].txt -> TrackingCookie.Burstnet : No action taken.
:mozilla.39:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Clickbank : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@clickbank[1].txt -> TrackingCookie.Clickbank : No action taken.
C:\Documents and Settings\Ben\Cookies\ben@com[1].txt -> TrackingCookie.Com : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@com[1].txt -> TrackingCookie.Com : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@msn-cnet.com[1].txt -> TrackingCookie.Com : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@news.com[1].txt -> TrackingCookie.Com : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\Victor\Cookies\victor@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@fastclick[2].txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.43:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Googleadservices : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@ivwbox[1].txt -> TrackingCookie.Ivwbox : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@linksynergy[1].txt -> TrackingCookie.Linksynergy : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@sales.liveperson[2].txt -> TrackingCookie.Liveperson : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@image.masterstats[1].txt -> TrackingCookie.Masterstats : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
C:\Documents and Settings\Victor\Cookies\victor@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@www.myaffiliateprogram[2].txt -> TrackingCookie.Myaffiliateprogram : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@salzburg.oewabox[1].txt -> TrackingCookie.Oewabox : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@data1.perf.overture[2].txt -> TrackingCookie.Overture : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@data2.perf.overture[2].txt -> TrackingCookie.Overture : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@data3.perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@ads-205.quarterserver[1].txt -> TrackingCookie.Quarterserver : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@questionmarket[2].txt -> TrackingCookie.Questionmarket : No action taken.
C:\Documents and Settings\Victor\Cookies\victor@questionmarket[2].txt -> TrackingCookie.Questionmarket : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@ads.realcastmedia[1].txt -> TrackingCookie.Realcastmedia : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@ads1.revenue[1].txt -> TrackingCookie.Revenue : No action taken.
C:\Documents and Settings\Ben\Cookies\ben@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : No action taken.
:mozilla.190:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Starware : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@h.starware[1].txt -> TrackingCookie.Starware : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@www.starware[1].txt -> TrackingCookie.Starware : No action taken.
:mozilla.946:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.953:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Tacoda : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@anad.tacoda[2].txt -> TrackingCookie.Tacoda : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@anat.tacoda[2].txt -> TrackingCookie.Tacoda : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@tacoda[2].txt -> TrackingCookie.Tacoda : No action taken.
:mozilla.17:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.20:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.21:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.22:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.23:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.27:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
:mozilla.28:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Trafficmp : No action taken.
C:\Documents and Settings\Ben\Cookies\ben@a.tribalfusion[2].txt -> TrackingCookie.Tribalfusion : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.841:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.842:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.843:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.846:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.850:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.851:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.852:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.853:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
:mozilla.854:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Web-stat : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@webstat[1].txt -> TrackingCookie.Web-stat : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@images.x10[2].txt -> TrackingCookie.X10 : No action taken.
:mozilla.89:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.90:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Documents and Settings\Sally\Cookies\sally@yieldmanager[1].txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.24:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.25:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.26:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.29:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.30:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Zedo : No action taken.
:mozilla.31:C:\Documents and Settings\Sally\Application Data\Mozilla\Firefox\Profiles\132vyna6.default\cookies.txt -> TrackingCookie.Zedo : No action taken.


::Report end

#4 MFDnSC

MFDnSC

    Ret. Director I/T


  • Members
  • 4,310 posts
  • OFFLINE
  •  
  • Local time:06:55 PM

Posted 26 December 2006 - 10:41 AM

Fix this with hijack - mark it - close ie - click fix checked

O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)

Log looks fine
"Nothing could be finer than to be in South Carolina ............"

Member ASAP




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users